General

  • Target

    ea1028d51351ab6846ebba118883f6f2_JaffaCakes118

  • Size

    43KB

  • Sample

    240918-14jzpawanb

  • MD5

    ea1028d51351ab6846ebba118883f6f2

  • SHA1

    eeee40c8300f8d6dc94367a46fed401b5716365a

  • SHA256

    d585e9fef9400725389a6dab42673766e2b53db9fd79fb0420e5addb7a4bda36

  • SHA512

    18169a5cf27c4081307781476535f2a4237abf65fbc393054ce3496a8fb6064d4226f985e242f3dbdd7c2d54c472be0cb446e6ba77c3e24aae4188ca6beee082

  • SSDEEP

    768:pwwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pEUNBwVM1hGs1UWG2lA:U4jqi5axwdrPp1N6VMus12

Malware Config

Targets

    • Target

      ea1028d51351ab6846ebba118883f6f2_JaffaCakes118

    • Size

      43KB

    • MD5

      ea1028d51351ab6846ebba118883f6f2

    • SHA1

      eeee40c8300f8d6dc94367a46fed401b5716365a

    • SHA256

      d585e9fef9400725389a6dab42673766e2b53db9fd79fb0420e5addb7a4bda36

    • SHA512

      18169a5cf27c4081307781476535f2a4237abf65fbc393054ce3496a8fb6064d4226f985e242f3dbdd7c2d54c472be0cb446e6ba77c3e24aae4188ca6beee082

    • SSDEEP

      768:pwwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pEUNBwVM1hGs1UWG2lA:U4jqi5axwdrPp1N6VMus12

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks